16951 matches found
PT-2025-23256 · Freescout · Freescout
Name of the Vulnerable Software and Affected Versions: FreeScout versions prior to 1.8.180 Description: The issue is caused by a lack of input validation and sanitization in both Session::flash and other areas, allowing user input to be executed without proper filtering. This results in a...
PT-2025-21064 · Intel · Intel Xeon 6 Processor E-Cores Firmware
Name of the Vulnerable Software and Affected Versions: IntelR XeonR 6 processor E-Cores firmware affected versions not specified Description: The issue is related to insufficient control flow management in the Alias Checking Trusted Module. This may allow a privileged user to potentially enable...
PT-2025-20984 · Adobe · Indesign
Name of the Vulnerable Software and Affected Versions: Adobe InDesign Desktop versions ID19.5.2, ID20.2 and earlier Description: The issue is a NULL Pointer Dereference that could lead to application denial-of-service. An attacker could exploit this to crash the application, causing a disruption ...
PT-2025-21070 · Intel · Intel Ethernet Connection
Name of the Vulnerable Software and Affected Versions: IntelR Ethernet Connection software versions prior to 29.4 Description: The issue is related to an uncontrolled search path element in some IntelR Ethernet Connection software. This may allow an authenticated user to potentially enable...
GHSA-2487-9F55-2VG9 OZI-Project/ozi-publish Code Injection vulnerability
Impact Potentially untrusted data flows into PR creation logic. A malicious actor could construct a branch name that injects arbitrary code. Patches This is patched in 1.13.6 Workarounds Downgrade to 1.13.2 References Understanding the Risk of Script Injections...
CVE-2025-47271 OZI-Project/ozi-publish Code Injection vulnerability
The OZI action is a GitHub Action that publishes releases to PyPI and mirror releases, signature bundles, and provenance in a tagged release. In versions 1.13.2 through 1.13.5, potentially untrusted data flows into PR creation logic. A malicious actor could construct a branch name that injects...
CVE-2025-46729 phpDVDProfiler Cross-site Scripting vulnerability
julmud/phpDVDProfiler is an adoption of the defunct phpDVDProfiler project, which allows users to display on the web their DVD collections maintained with Invelos's DVDProfiler software. Starting in v20230807 and prior to v20250511, cross-site scripting in the search function. v20250511 contains ...
Cross-site Scripting (XSS)
mobsf is vulnerable to Stored Cross-Site Scripting XSS. The vulnerability is due to improper input sanitization during SVG file handling in the Android APK analysis workflow, which allows malicious scripts to be embedded in the SVG files...
Authentication Bypass
passport-wsfed-saml2 is vulnerable to Authentication Bypass. The vulnerability is due to improper validation of the SAML assertion recipient and insecure handling of signed SAML objects, which allows attackers to reuse valid assertions to impersonate users...
MAL-2025-3757 Malicious code in backstage-plugin-kubernetes-backend (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d5e128ce958505a3df2acbdc6b87aaf80b05e6b5a1dec494681ab2ceced6a0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-4555
creationtimestamp| type| source ---|---|--- 2025-05-12 02:42:43+00:00| seen| https://bsky.app/profile/potato.software/post/3lowx4mpfx52i 2025-05-12 04:42:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lox5s45jie24 2025-05-12 05:31:00+00:00| seen|...
PT-2025-20694 · Unknown · Abantecart
Name of the Vulnerable Software and Affected Versions: AbanteCart version 1.4.0 Description: A Reflected Cross-Site Scripting XSS issue allows an attacker to execute JavaScript code in a victim's browser by sending a malicious URL. This can be exploited to steal sensitive user data, such as sessi...
PT-2025-20745 · Apple · Macos Sequoia +1
Name of the Vulnerable Software and Affected Versions: macOS Sequoia versions prior to 15.5 Description: The issue was addressed with improved memory handling. Processing maliciously crafted web content may lead to an unexpected process crash. Recommendations: For versions prior to 15.5, update t...
CVE-2025-44022
An issue in vvveb CMS v.1.0.6 allows a remote attacker to execute arbitrary code via the Plugin mechanism...
Schweitzer Engineering Laboratories SEL-5033 acSELerator RTAC Software 安全漏洞
Schweitzer Engineering Laboratories SEL-5033 acSELerator RTAC Software is a graphical, easy-to-use tool from Schweitzer Engineering Laboratories, Inc. that helps users quickly and easily configure the SEL Real-Time Automation Controller RTAC quickly and easily. A security vulnerability exists in...
PT-2025-20721 · Schweitzer Engineering Laboratories · Sel Blueframe Os
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An issue exists where an authenticated user can submit scripting to fields that lack proper input and output sanitization, leading to subsequent client-side script execution. Recommendations...
PT-2025-20686 · Auma · Auma Profox +5
Name of the Vulnerable Software and Affected Versions: Auma AC1.2 versions 06.00.00 through 06.09.04 Auma MEC 03.01 versions prior to 01.02.00 Auma PROFOX versions prior to 01-01.10.00 Auma SGx/SVx versions 03.00.00 through 03.05.01 Auma TIGRON versions prior to 01-01.09.00 Auma TIGRON SIL versio...
PT-2025-20712 · Schweitzer Engineering Laboratories · Sel Blueframe Os
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An authenticated user without user administrative permissions could change the administrator Account Name. Recommendations: At the moment, there is no information about a newer version that...
Mageia: Security Advisory (MGASA-2025-0152)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...